Data protection
Table of Contents
- Access
Data and Hosting
Hosting - Data
Processing for Contract Performance and Contact
2.1 Data Processing for Contract Performance
2.2 Customer Account
Contact - Data
Processing for Shipping Purposes
Disclosure of Data to Shipping Providers for Shipping Notifications - Data
Processing for Payment Processing
4.1 Data Processing for Transaction Processing
4.2 Data Processing for Fraud Prevention and Optimisation of Our Payment Processes
4.3 Identity and Creditworthiness Check When Selecting Klarna Payment Services
4.4 Identity and Creditworthiness Check When Selecting Purchase on Account via PayPal and Ratepay - Advertising
by Email
5.1 Email Newsletter with Registration and Newsletter Tracking
Email Newsletter without Registration and Your Right to Object
5.2 Sending Requests for Reviews by Email - Cookies
and Other Technologies
General Information - Use
of Cookies and Other Technologies
Use of Google Services - Integration
of the Trusted Shops Trustbadge / Other Widgets
8.1 Data Processing When Integrating the Trustbadge / Other Widgets
8.2 Data Processing After Completion of an Order - Social
Media
9.1 Social Buttons from Facebook (by Meta), Instagram (by Meta)
9.2 Our Online Presence on Facebook (by Meta), Instagram (by Meta), Pinterest - Contact
Options and Your Rights
10.1 Your Rights
10.2 Contact Options
The controller responsible for data processing is:
Viktor Kondratyev
Hauptstr 61a
Wandlitz
Email: office@eximwelt.de
Telephone: +49 30 52015150
We appreciate your interest in our website. Protecting your
privacy is very important to us. Below, we provide detailed information about
how we handle your data.
1. Access Data and Hosting
You can visit our websites without providing any personal
information.
Each time a website is accessed, the web server
automatically stores a so-called server log file containing, for example, the
name of the requested file, your IP address, the date and time of access, the
amount of data transferred and the requesting provider (access data), and
documents the access.
This access data is evaluated exclusively for the purpose of
ensuring the trouble-free operation of the website and improving our services.
This serves to safeguard our legitimate interests, which
prevail in the context of a balancing of interests, in the correct presentation
of our services pursuant to Art. 6(1)(f) GDPR.
All access data is deleted no later than seven days after
the end of your visit to the website.
All access data is processed only for as long as necessary
to achieve the processing purposes specified above.
Hosting
The services for hosting and displaying the website are
partly provided by our service providers as part of processing on our behalf.
Unless otherwise explained in this Privacy Policy, all
access data and all data collected through forms provided for this purpose on
this website are processed on their servers.
If you have any questions about our service providers and
the basis of our cooperation with them, please contact us using the contact
option described in this Privacy Policy.
2. Data Processing for Contract Performance and Contact
2.1 Data Processing for Contract Performance
For the purpose of contract performance, including enquiries
concerning and the processing of any existing claims arising from warranty
rights, disruptions in performance and rights of withdrawal, as well as any
statutory updating obligations, pursuant to Art. 6(1)(b) GDPR, we collect
personal data if you voluntarily provide it to us as part of your order.
Mandatory fields are marked as such because, in these cases,
we necessarily require the data for contract performance and cannot dispatch
the order without this information.
The data collected can be seen from the respective input
forms.
Further information on the processing of your data,
particularly disclosure to our service providers for the purpose of order,
payment and shipping processing, can be found in the following sections of this
Privacy Policy.
Once the contract has been fully performed, further
processing of your data will be restricted, and the data will be deleted after
expiry of the retention periods prescribed by tax and commercial law pursuant
to Art. 6(1)(c) GDPR, unless you have expressly consented to further use of
your data pursuant to Art. 6(1)(a) GDPR or we reserve the right to use data
beyond this scope in a manner permitted by law and about which we inform you in
this Privacy Policy.
Merchandise Management System
For order and contract processing, we use merchandise
management systems provided by external service providers.
Our service providers act on our behalf as processors.
If you have any questions about our service providers and
the basis of our cooperation with them, please contact us using the contact
option described in this Privacy Policy.
2.2 Customer Account
If you have given your consent pursuant to Art. 6(1)(a) GDPR
by choosing to open a customer account, we use your data for the purpose of
opening the customer account and storing your data for future orders on our
website.
You may delete your customer account at any time, either by
sending a message using the contact option described in this Privacy Policy or
by using a function provided for this purpose in the customer account.
After deletion of your customer account, your data will be
deleted unless you have expressly consented to further use of your data
pursuant to Art. 6(1)(a) GDPR or we reserve the right to use data beyond this
scope in a manner permitted by law and about which we inform you in this
Privacy Policy.
Contact
As part of customer communication, we collect personal data
for the purpose of processing your enquiries pursuant to Art. 6(1)(b) GDPR if
you voluntarily provide such data when contacting us, for example via a contact
form, live chat tool or email.
Mandatory fields are marked as such because, in these cases,
we necessarily require the data to process your enquiry.
The data collected can be seen from the respective input
forms.
Once your enquiry has been fully processed, your data will
be deleted unless you have expressly consented to further use of your data
pursuant to Art. 6(1)(a) GDPR or we reserve the right to use data beyond this
scope in a manner permitted by law and about which we inform you in this
Privacy Policy.
3. Data Processing for Shipping Purposes
For the purpose of fulfilling the contract pursuant to Art.
6(1)(b) GDPR, we disclose your data to the shipping provider commissioned with
delivery to the extent necessary for the delivery of ordered goods.
If you have any questions about our service providers and
the basis of our cooperation with them, please contact us using the contact
option described in this Privacy Policy.
Disclosure of Data to Shipping Providers for Shipping
Notifications
If you have given us your express consent during or after
your order, we will, on the basis of that consent pursuant to Art. 6(1)(a)
GDPR, disclose your email address and telephone number to the selected shipping
provider so that the provider may contact you before delivery for the purpose
of announcing or coordinating the delivery.
You may withdraw your consent at any time by sending a
message using the contact option described in this Privacy Policy.
Following withdrawal, we will delete the data provided by
you for this purpose unless you have expressly consented to further use of your
data or we reserve the right to use data beyond this scope in a manner
permitted by law and about which we inform you in this Privacy Policy.
If you have any questions about our service providers and
the basis of our cooperation with them, please contact us using the contact
option described in this Privacy Policy.
4. Data Processing for Payment Processing
When processing payments in our online shop, we cooperate
with the following partners:
- technical
service providers;
- credit
institutions;
- payment
service providers.
4.1 Data Processing for Transaction Processing
Depending on the payment method selected, we disclose the
data required for processing the payment transaction to our technical service
providers, the commissioned credit institutions or the selected payment service
provider, insofar as this is necessary for processing the payment.
This serves to fulfil the contract pursuant to Art. 6(1)(b)
GDPR.
In some cases, payment service providers collect the data
required for payment processing themselves, for example on their own website or
through technical integration into the ordering process.
In this respect, the Privacy Policy of the respective
payment service provider applies.
Depending on the payment method selected, data may be
transferred to third countries outside the EU/EEA for which the European
Commission has determined by decision that an adequate level of data protection
exists.
Where data is transferred to third countries outside the
EU/EEA for which the European Commission has not issued an adequacy decision,
our cooperation is based on the European Commission's Standard Contractual
Clauses.
If you have any questions about our payment processing
partners or the basis of our cooperation with them, please contact us using the
contact option specified in this Privacy Policy.
4.2 Data Processing for Fraud Prevention and Optimisation of Our Payment Processes
Where applicable, we provide the aforementioned service
providers with additional data that they use together with the data required to
process the payment for the purposes of fraud prevention and optimisation of
our payment processes, for example invoicing, processing disputed payments and
supporting accounting.
Pursuant to Art. 6(1)(f) GDPR, this serves to safeguard our
legitimate interests, which prevail in the context of a balancing of interests,
in protecting ourselves against fraud and ensuring efficient payment
management.
4.3 Identity and Creditworthiness Check When Selecting
Klarna Payment Services
Klarna Direct Debit, Purchase on Account via Klarna,
Klarna Instalment Purchase
If you choose payment services provided by Klarna Bank AB
(publ), Sveavägen 46, 111 34 Stockholm, Sweden (“Klarna”), we ask for your
consent pursuant to Art. 6(1)(a) GDPR to transmit to Klarna the data necessary
for payment processing and for an identity and creditworthiness check.
In Germany, the credit agencies named in Klarna's Privacy
Policy may be used for identity and creditworthiness checks.
Klarna uses the information received concerning the
statistical probability of a payment default to make a balanced decision on the
establishment, performance or termination of the contractual relationship.
You may withdraw your consent at any time by sending a
message using the contact option specified in this Privacy Policy.
This may result in us no longer being able to offer you
certain payment options.
You may also withdraw your consent to this use of personal
data directly from Klarna at any time.
4.4 Identity and Creditworthiness Check When Selecting
Purchase on Account via PayPal and Ratepay
If you select purchase on account, offered via Ratepay GmbH,
Franklinstraße 28–29, 10587 Berlin (“Ratepay”) and PayPal (Europe) S.à r.l. et
Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg (“PayPal”), we ask for your
consent pursuant to Art. 6(1)(a) GDPR to transmit to Ratepay the data required
for payment processing and for an identity and creditworthiness check.
In Germany, the credit agencies listed in Ratepay's Privacy
Policy may be used for identity and creditworthiness checks.
Ratepay uses the information received concerning the
statistical probability of a payment default to make a balanced decision
regarding the establishment, performance or termination of the contractual
relationship.
You may withdraw your consent at any time by sending a
message using the contact option specified in this Privacy Policy.
This may result in us no longer being able to offer you
certain payment options.
Additional information concerning data protection at PayPal
can be found here.
5. Advertising by Email
5.1 Email Newsletter with Registration and Newsletter
Tracking
If you subscribe to our newsletter, we use the data required
for this purpose or separately provided by you to regularly send you our email
newsletter on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
You may unsubscribe from the newsletter at any time, either
by sending a message using the contact option described below or by using the
unsubscribe link provided in the newsletter.
After unsubscribing, we delete your email address from the
recipient list unless you have expressly consented to further use of your data
pursuant to Art. 6(1)(a) GDPR or we reserve the right to use data beyond this
scope in a manner permitted by law and about which we inform you in this
Privacy Policy.
Please note that when sending the newsletter, we analyse
your user behaviour.
For this purpose, we also analyse your interaction with our
newsletter by measuring, storing and evaluating opening rates and click-through
rates for the purpose of designing future newsletter campaigns (“Newsletter
Tracking”).
For this analysis, the emails sent contain one-pixel
technologies, for example so-called web beacons or tracking pixels, which are
stored on our website.
For the analyses, we link, in particular, the following
“newsletter data”:
- the
page from which the page was requested (so-called referrer URL);
- the
date and time of access;
- a
description of the type of web browser used;
- the
IP address of the requesting computer;
- the
email address;
- the
date and time of registration and confirmation;
as well as the one-pixel technologies with your email
address or IP address and, where applicable, an individual ID.
Links contained in the newsletter may also contain this ID.
If you do not wish to participate in Newsletter Tracking,
you may unsubscribe from the newsletter at any time as described above.
The information is stored for as long as you remain
subscribed to the newsletter.
Email Newsletter without Registration and Your Right to
Object
If we receive your email address in connection with the sale
of goods or services, we reserve the right to regularly send you offers by
email for products from our range that are similar to those you have already
purchased.
We will not send you such offers if you have already
objected to this use of your email address or if you are listed in a legally
mandatory Robinson list.
You may object to this use of your email address at any
time, easily and free of charge, either by sending a message using the contact
option described in this Privacy Policy or via a link provided for this purpose
in the advertising email, without incurring any costs other than transmission
costs at the basic rates.
After unsubscribing, we delete your email address from the
recipient list unless you have expressly consented to further use of your data
pursuant to Art. 6(1)(a) GDPR or we reserve the right to use data beyond this
scope in a manner permitted by law and about which we inform you in this
Privacy Policy.
5.2 Sending Requests for Reviews by Email
If you have given us your express consent during or after
your order pursuant to Art. 6(1)(a) GDPR, we use your email address to ask you
to submit a review of your order through the review system used by us.
You may withdraw this consent at any time by sending a
message using the contact option described in this Privacy Policy or via a link
provided for this purpose in the review request.
After withdrawal of your consent, we delete your email
address from the recipient list unless you have expressly consented to further
use of your data pursuant to Art. 6(1)(a) GDPR or we reserve the right to use
data beyond this scope in a manner permitted by law and about which we inform
you in this Privacy Policy.
Review requests may also be sent by our service provider:
Trusted Shops SE
Subbelrather Str. 15C
50823 Cologne
Germany
(“Trusted Shops”)
As part of sending review requests, we receive information
from Trusted Shops regarding the respective status, for example whether the
review request was sent and whether it was delivered.
This is carried out pursuant to Art. 6(1)(f) GDPR to fulfil
our legitimate interest in receiving information about review invitations in
order to make optimisations where appropriate, as well as to fulfil Trusted
Shops' legitimate interest in being able to provide this service.
We and Trusted Shops are jointly responsible for sending
review requests and collecting and displaying review and status information.
Within the scope of the joint controllership between us and
Trusted Shops, if you have any data protection questions or wish to exercise
your rights, please preferably contact Trusted Shops using the contact options
provided here.
Further information on data protection can be found at the
following link here.
Irrespective of this, you may always contact us using the
contact option described in this Privacy Policy.
If necessary, your request will then be forwarded to the
other controller for a response.
6. Cookies and Other Technologies
General Information
In order to make your visit to our website attractive and
enable the use of certain functions, we use technologies, including so-called
cookies, on various pages.
Cookies are small text files that are automatically stored
on your device.
Some of the cookies we use are deleted after the end of the
browser session, i.e. when you close your browser (so-called session cookies).
Other cookies remain on your device and allow us to
recognise your browser on your next visit (persistent cookies).
You can find information on the storage duration in the
overview in your web browser's cookie settings.
Protection of Privacy on End Devices
When you use our online services, we use strictly necessary
technologies in order to provide the digital service expressly requested by
you.
The storage of information on your device or access to
information already stored on your device does not require consent in this
respect.
For functions that are not strictly necessary, storing
information on your device or accessing information already stored on your
device requires your consent.
Please note that if you do not grant consent, parts of the
website may not be fully usable.
Any consent you have given will remain valid until you
adjust or reset the respective settings on your device.
Subsequent Data Processing by Cookies and Other
Technologies
We use technologies that are strictly necessary for the use
of certain functions of our website.
These technologies collect and process the IP address, time
of visit, device and browser information, and information concerning your use
of our website.
Within the context of a balancing of interests, this serves
our overriding legitimate interests in an optimised presentation of our
services pursuant to Art. 6(1)(f) GDPR.
We also use technologies to fulfil legal obligations to
which we are subject, for example to demonstrate consent to the processing of
your personal data, as well as for web analytics and online marketing.
Further information on this, including the respective legal
basis for data processing, can be found in the following sections of this
Privacy Policy.
Cookie Settings
You can find the cookie settings for your browser at the
following links:
Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
If you have consented to the use of technologies pursuant to
Art. 6(1)(a) GDPR, you may withdraw your consent at any time by sending a
message using the contact option described in this Privacy Policy.
7. Use of Cookies and Other Technologies
We use the following cookies and other technologies from
third-party providers on our website.
Unless otherwise stated for individual technologies, this
takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
Once the purpose no longer applies and we cease using the
respective technology, the data collected in this connection will be deleted.
You may withdraw your consent at any time with effect for
the future.
Further information on your options for withdrawal can be
found in the section “Cookies and Other Technologies”.
Further information, including the basis of our cooperation
with the individual providers, can be found under the respective technologies.
If you have any questions about the providers and the basis
of our cooperation with them, please contact us using the contact option
described in this Privacy Policy.
Use of Google Services
We use the technologies described below provided by:
Google Ireland Ltd.
Gordon House
Barrow Street
Dublin 4
Ireland
(“Google”)
The information automatically collected by Google
technologies concerning your use of our website is generally transmitted to and
stored on a server operated by:
Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043
USA
Unless otherwise stated for individual technologies, data
processing is carried out on the basis of an agreement concluded for the
respective technology between joint controllers pursuant to Art. 26 GDPR.
Further information on data processing by Google can be
found in Google's Privacy Policy.
Our service providers are located and/or use servers in
countries outside the EU and EEA for which the European Commission has
determined by decision that an adequate level of data protection exists.
Our service providers are also located and/or use servers in
countries outside the EU and EEA for which no adequacy decision has been issued
by the European Commission.
Our cooperation with them is based on the European
Commission's Standard Contractual Clauses.
Google Analytics
For the purpose of website analysis, Google Analytics
automatically collects and stores data, including IP address, time of visit,
device and browser information, as well as information concerning your use of
our website, from which pseudonymous user profiles are created.
Cookies may be used for this purpose.
If you visit our website from the EU, your IP address is
stored on a server located within the EU for the purpose of deriving location
information and is then immediately deleted before traffic is forwarded to
other Google servers for processing.
Data processing is carried out on the basis of a data
processing agreement with Google.
For the purpose of optimised marketing of our website, we
have activated the data-sharing settings for “Google products and services”.
This enables Google to access data collected and processed
by Google Analytics and subsequently use it to improve Google services.
The sharing of data with Google under these data-sharing
settings is based on an additional agreement between controllers.
We have no influence over Google's subsequent data
processing.
For the purpose of optimised marketing of our website, we
use the so-called User-ID function.
Using this function, we can assign a unique, permanent ID to
your interaction data from one or more sessions on our online platforms and
thus analyse your user behaviour across devices and sessions.
For web analytics, the Google Analytics extension Google
Signals enables so-called “Cross-Device Tracking”.
If your internet-enabled devices are linked to your Google
account and you have activated the “personalised advertising” setting in your
Google account, Google can create reports concerning your usage behaviour,
particularly cross-device user numbers, even if you change devices.
We do not process personal data in this respect; we only
receive statistics generated on the basis of Google Signals.
For web analytics and advertising purposes, the Google
Analytics DoubleClick cookie extension enables your browser to be recognised
when you visit other websites.
Google will use this information to compile reports on
website activities and to provide other services related to website use.
If you do not provide us with consent pursuant to Art.
6(1)(a) GDPR for the use of Google Analytics, no cookies will be stored on or
read from your device.
The data processing described in the preceding paragraphs
will not take place.
In order to fill gaps in web analytics through behavioural
and conversion modelling, pings containing data such as User-Agent information,
information concerning your consent behaviour, screen resolution and IP address
are sent to Google.
Google AdSense
Our website uses Google AdSense to market advertising space
for third-party advertisements.
These advertisements are displayed to you in various places
on this website.
The so-called DoubleClick cookie enables interest-based
advertising through the collection and processing of data, including IP
address, time of visit, device and browser information, and information
concerning your use of our website, as well as the automatic assignment of a
pseudonymous User ID that can be used to determine interests based on visits to
this and other websites.
Google Ads
For advertising purposes in Google search results and on
third-party websites, the so-called Google Remarketing Cookie is set when you
visit our website.
Through the collection and processing of data, including IP
address, time of visit, device and browser information and information
concerning your use of our website, and by means of a pseudonymous Cookie ID
and based on the pages you have visited, this automatically enables
interest-based advertising.
Further data processing only takes place if you have
activated the “personalised advertising” setting in your Google account.
If, in this case, you are logged into Google while visiting
our website, Google uses your data together with Google Analytics data to
create and define target audience lists for cross-device remarketing.
For website analysis and event tracking, we use Google Ads
Conversion Tracking to measure your subsequent usage behaviour if you reach our
website via a Google Ads advertisement.
Cookies may be used for this purpose and data may be
collected, including IP address, time of visit, device and browser information
and information concerning your use of our website based on events defined by
us, such as visiting a website or subscribing to a newsletter.
Pseudonymous user profiles may be created from this data.
If you do not give us your consent pursuant to Art. 6(1)(a)
GDPR for the use of Google Ads, no cookies will be stored on or read from your
device.
The data processing described in the preceding paragraphs
will not take place.
In order to fill gaps in web analytics through behavioural
and conversion modelling, pings containing data including User-Agent
information, information concerning your consent behaviour, screen resolution,
IP address, page URL and information concerning ad clicks contained in URL
parameters are sent to Google.
Your IP address is used to determine the IP country.
Google Maps
For the visual display of geographical information, Google
Maps collects data relating to your use of Maps functions, particularly your IP
address and location data, transmits this data to Google and subsequently
processes it.
We have no influence over this subsequent data processing.
Google reCAPTCHA
For the purpose of protecting our web forms against misuse
and spam by automated software, so-called bots, Google reCAPTCHA collects data
including IP address, time of visit, browser information and information
concerning your use of our website and analyses your use of our website using
JavaScript and cookies.
In addition, other cookies stored in your browser by Google
services are evaluated.
Data processing is carried out on the basis of a data
processing agreement with Google.
Users of a customer who access websites protected by
reCAPTCHA are no longer subject to Google's Privacy Policy and Terms of
Service.
Google Tag Manager
Google Tag Manager enables us to manage various codes and
services on our website.
When implementing individual tags, Google may also process
personal data, for example IP addresses and online identifiers, including
cookies.
Data processing is carried out on the basis of a data
processing agreement with Google.
The use of Google Tag Manager enables various services and
technologies to be integrated.
If you do not wish individual tracking services to be used
and have therefore deactivated them, the deactivation remains in effect for all
affected tracking tags integrated through Google Tag Manager.
8. Integration of the Trusted Shops Trustbadge / Other
Widgets
Trusted Shops widgets are integrated into this website in
order to display Trusted Shops services, for example quality seals and
collected reviews.
This serves to safeguard our legitimate interests, which
prevail in the context of a balancing of interests, in optimal marketing by
enabling secure shopping pursuant to Art. 6(1)(f) GDPR.
The Trustbadge and the services advertised through it are
provided by:
Trusted Shops SE
Subbelrather Str. 15C
50823 Cologne
Germany
(“Trusted Shops”)
Together with Trusted Shops, we are joint controllers for
data protection purposes pursuant to Art. 26 GDPR.
Within this Privacy Policy, we inform you below about the
essential content of the agreement pursuant to Art. 26(2) GDPR.
When you interact with Trustbadge AI+, session cookies are
set to store your login status and display the so-called Welcome Layer, which
shows details of the respective online shop, including company information,
reviews, information about the availability of buyer protection, as well as the
#trstd secret.
A cookie is set to recognise logged-in users and stored for
a maximum of 400 days after login.
Session cookies are also set to send push notifications when
using the app, provided that the user has permitted them.
This is necessary so that Trusted Shops can provide the
digital service requested by you.
Trusted Shops is responsible for data processing when you
interact with Trustbadge AI+.
Within the scope of the joint controllership between us and
Trusted Shops SE, if you have any data protection questions or wish to exercise
your rights, please preferably contact Trusted Shops using the contact options
specified in its privacy information.
Irrespective of this, you may always contact the controller
of your choice.
If necessary, your request will then be forwarded to the
other controller for a response.
8.1 Data Processing When Integrating the Trustbadge /
Other Widgets
The Trustbadge is provided by a US-based CDN provider
(Content Delivery Network).
An adequate level of data protection is ensured by an
adequacy decision of the EU Commission, which for the USA is available here.
Service providers used in the USA are generally certified
under the EU-U.S. Data Privacy Framework (DPF).
Further information is available here.
Where service providers used are not certified under the
DPF, Standard Contractual Clauses have been concluded as an appropriate
safeguard.
When the Trustbadge is accessed, the web server
automatically stores a so-called server log file, which also contains your IP
address, the date and time of access, the amount of data transferred and the
requesting provider (access data), and documents the access.
The IP address is anonymised immediately after collection so
that the stored data cannot be attributed to you personally.
The anonymised data is used in particular for statistical
purposes and error analysis.
8.2 Data Processing After Completion of an Order
After completion of an order, order information, including
order totals, order number and, where applicable, the product purchased, as
well as your email address hashed using a cryptographic one-way function, is
transmitted to Trusted Shops.
The legal basis is Art. 6(1)(f) GDPR.
This serves to verify whether you are already registered for
Trusted Shops services and is therefore necessary to fulfil our and Trusted
Shops' overriding legitimate interests in providing transactional review
services linked to the specific order pursuant to Art. 6(1)(f) GDPR.
If you are registered, further processing takes place in
accordance with the contractual agreement concluded between you and Trusted
Shops.
If you are not yet registered for the services, you will
subsequently be given the opportunity to register for the first time.
Further processing after registration is likewise governed
by the contractual agreement with Trusted Shops.
If you are not yet registered for the services, you will
subsequently be given the opportunity to provide your consent to receive review
invitations.
If you do not give this consent, all transmitted data will
automatically be deleted by Trusted Shops and it will then no longer be
possible to identify you personally.
Trusted Shops uses service providers in the areas of
hosting, monitoring and logging.
The legal basis is Art. 6(1)(f) GDPR for the purpose of
ensuring trouble-free operation.
Processing may take place in third countries, including the
USA, the United Kingdom and Israel.
An adequate level of data protection is ensured in each case
by an adequacy decision of the EU Commission, which is available here for the
USA, here for the United Kingdom and here for Israel.
Service providers used in the USA are generally certified
under the EU-U.S. Data Privacy Framework (DPF).
Further information is available here.
Where service providers used are not certified under the
DPF, Standard Contractual Clauses have been concluded as an appropriate
safeguard.
9. Social Media
9.1 Social Buttons from Facebook (by Meta), Instagram (by
Meta)
Social buttons from social networks are used on our website.
These are integrated into the website solely as HTML links,
meaning that no connection to the servers of the respective provider is
established when you access our website.
If you click one of the buttons, the website of the
respective social network opens in a new browser window.
There you can, for example, use the Like or Share button.
9.2 Our Online Presence on Facebook (by Meta), Instagram
(by Meta), Pinterest
If you have given your consent pursuant to Art. 6(1)(a) GDPR
to the respective social media operator, your data is automatically collected
and stored for market research and advertising purposes when you visit our
online presence on the aforementioned social media platforms.
Pseudonymous user profiles are created from this data.
These profiles can be used, for example, to display
advertisements within and outside the platforms that are presumed to correspond
to your interests.
Cookies are generally used for this purpose.
Detailed information concerning the processing and use of
data by the respective social media operator, as well as contact options and
your related rights and settings for protecting your privacy, can be found in
the providers' privacy information linked below.
If you nevertheless require assistance in this regard, you
may contact us.
Facebook (by Meta)
Facebook (by Meta) is a service provided by:
Meta Platforms Ireland Ltd.
Block J, Serpentine Avenue
Dublin 4
Ireland
(“Meta Platforms Ireland”)
The information automatically collected by Meta Platforms
Ireland concerning your use of our online presence on Facebook (by Meta) is
generally transmitted to and stored on a server operated by:
Meta Platforms, Inc.
1601 Willow Road
Menlo Park, California 94025
USA
Data processing in connection with visits to a Facebook (by
Meta) fan page is carried out on the basis of an agreement between joint
controllers pursuant to Art. 26 GDPR.
Further information, including information concerning
Insights Data, can be found here.
Our service providers are located and/or use servers in the
following countries for which the European Commission has determined by
decision that an adequate level of data protection exists:
Brazil, USA, Canada, Japan, South Korea, New Zealand, United
Kingdom, Argentina.
The adequacy decision for the USA serves as the basis for
third-country transfers where the respective service provider is certified.
Certification is in place.
Our service providers are also located and/or use servers in
the following countries:
Australia, Hong Kong, India, Indonesia, Malaysia, Singapore,
Thailand, Taiwan and Mexico.
No adequacy decision of the European Commission exists for
these countries.
Our cooperation with them is based on the following
safeguards:
European Commission Standard Contractual Clauses.
Instagram (by Meta)
Instagram (by Meta) is a service provided by:
Meta Platforms Ireland Ltd.
Block J, Serpentine Avenue
Dublin 4
Ireland
(“Meta Platforms Ireland”)
The information automatically collected by Meta Platforms
Ireland concerning your use of our online presence on Instagram is generally
transmitted to and stored on a server operated by:
Meta Platforms, Inc.
1601 Willow Road
Menlo Park, CA 94025
USA
Data processing in connection with visits to an Instagram
(by Meta) fan page is carried out on the basis of an agreement between joint
controllers pursuant to Art. 26 GDPR.
Further information, including information concerning
Insights Data, can be found here.
Our service providers are located and/or use servers in the
following countries for which the European Commission has determined by
decision that an adequate level of data protection exists:
Brazil, USA, Canada, Japan, South Korea, New Zealand, United
Kingdom, Argentina.
The adequacy decision for the USA serves as the basis for
third-country transfers where the respective service provider is certified.
Certification is in place.
Our service providers are also located and/or use servers in
the following countries:
Australia, Hong Kong, India, Indonesia, Malaysia, Singapore,
Thailand, Taiwan and Mexico.
No adequacy decision of the European Commission exists for
these countries.
Our cooperation with them is based on the following
safeguards:
European Commission Standard Contractual Clauses.
Pinterest
Pinterest is a service provided by:
Pinterest Europe Ltd.
Waterloo Exchange
3rd Floor
Waterloo Road
Dublin 4
Ireland
(“Pinterest”)
The information automatically collected by Pinterest
concerning your use of our online presence on Pinterest is generally
transmitted to and stored on a server operated by:
Pinterest, Inc.
505 Brannan St.
San Francisco, CA 94107
USA
Our service providers are located and/or use servers in
countries outside the EU and EEA for which the European Commission has
determined by decision that an adequate level of data protection exists.
Our service providers are also located and/or use servers in
countries outside the EU and EEA for which no adequacy decision has been issued
by the European Commission.
Our cooperation with them is based on the European
Commission's Standard Contractual Clauses.
10. Contact Options and Your Rights
10.1 Your Rights
As a data subject, you have the following rights:
- pursuant
to Art. 15 GDPR, the right to request information, to the extent specified
therein, concerning your personal data processed by us;
- pursuant
to Art. 16 GDPR, the right to request the immediate correction of
inaccurate personal data or completion of personal data stored by us;
- pursuant
to Art. 17 GDPR, the right to request deletion of your personal data
stored by us, unless further processing is necessary:
- for
exercising the right of freedom of expression and information;
- for
compliance with a legal obligation;
- for
reasons of public interest; or
- for
the establishment, exercise or defence of legal claims;
- pursuant
to Art. 18 GDPR, the right to request restriction of processing of your
personal data where:
- the
accuracy of the data is contested by you;
- the
processing is unlawful, but you oppose its deletion;
- we
no longer require the data, but you require it for the establishment,
exercise or defence of legal claims; or
- you
have objected to processing pursuant to Art. 21 GDPR;
- pursuant
to Art. 20 GDPR, the right to receive personal data that you have provided
to us in a structured, commonly used and machine-readable format or to
request its transmission to another controller;
- pursuant
to Art. 77 GDPR, the right to lodge a complaint with a supervisory
authority. As a rule, you may contact the supervisory authority at your
habitual place of residence or place of work or at the place of our
company's registered office.
Right to Object
Where we process personal data as explained above in order
to safeguard our legitimate interests, which prevail in the context of a
balancing of interests, you may object to such processing with effect for the
future.
If the processing is carried out for direct marketing
purposes, you may exercise this right at any time as described above.
Where processing is carried out for other purposes, you have
a right to object only on grounds relating to your particular situation.
After exercising your right to object, we will no longer
process your personal data for these purposes unless we can demonstrate
compelling legitimate grounds for the processing which override your interests,
rights and freedoms, or where the processing serves the establishment, exercise
or defence of legal claims.
This does not apply where processing is carried out for
direct marketing purposes.
In that case, we will no longer process your personal data
for that purpose.
10.2 Contact Options
Data Protection Officer:
Viktor Kondratyev
Hauptstr 61a
Wandlitz
Germany
+49 30 52015150
office@eximwelt.de
If you have any questions concerning the collection,
processing or use of your personal data, requests for information, correction,
restriction or deletion of data, withdrawal of consent that may have been given
or objection to a particular use of data, please contact:
Viktor Kondratyev
Hauptstr 61a
Wandlitz
Germany
+49 30 52015150
office@eximwelt.de
